CVE-2019-3807
CVE-2019-3807
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers with the AA flag not set were not properly validated, allowing an attacker to bypass DNSSEC validation.
CVSS 3.7 · Low · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
pdns-recursor
- Versions
- versions 4.1.x before 4.1.9: Affected
No fix published
pdns-recursor Debian:12
- Affected ranges
- ECOSYSTEM: < 4.1.9-1
Update to 4.1.9-1
pdns-recursor Debian:13
- Affected ranges
- ECOSYSTEM: < 4.1.9-1
Update to 4.1.9-1
pdns-recursor Debian:14
- Affected ranges
- ECOSYSTEM: < 4.1.9-1
Update to 4.1.9-1
pdns-recursor Ubuntu:Pro:16.04:LTS
- Versions
- 3.7.3-1
- 4.0.0~alpha1-1
- 4.0.0~alpha1-2
- 4.0.0~alpha2-2
- 4.0.0~alpha2-2ubuntu0.1
- 4.0.0~alpha2-2ubuntu0.1+esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
pdns-recursor Ubuntu:Pro:18.04:LTS
- Versions
- 4.0.6-1
- 4.0.6-1build1
- 4.0.7-1
- 4.1.1-1
- 4.1.1-1build1
- 4.1.1-2
- 4.1.1-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published